Network and Security Engineer (San Mateo)

Our Company:

Genista Biosciences is a rapidly growing biotech company based in San Jose, CA that is dedicated to improving public health and food safety, both on the community and global scale. To revolutionize food safety by creating a cutting-edge platform based on a unique combination of robotics, software, and technology. Our ability to offer fast and accurate testing while still being cost-effective allows every member of the food supply chain (big or small) to be rest assured that the food they produce is safe thereby making the world a better place.

Our Goal:

As our first Network and Security Engineer, you will own the stability and security of our hybrid environment. You will manage our physical Ubiquiti stack at the office/lab and partner with DevOps to secure our production AWS environment. This is a high-impact role where you will build the automation and security frameworks that allow our biotech research to scale safely.

Job Responsibilities:

On-Premise & IT Operations

• Ubiquiti Management: Full ownership of UniFi/UISP infrastructure, including Dream Machines, switches, and APs.
• Lab Connectivity: Ensure high-uptime network performance for critical research equipment and automated lab workflows.
• Access Control: Manage physical and digital access, including RADIUS, VPNs, and WPA3 enterprise security.
• Lifecycle Ops: Automate the onboarding and offboarding process for hardware, workstations, and local credentials.

☁️ AWS & Cloud Security

• Shared Responsibility: Collaborate with DevOps to harden AWS VPCs, IAM roles, and S3 bucket policies.
• Vulnerability Remediation: Use AWS Inspector or similar tools to identify and fix security gaps in cloud-based applications.
• Connectivity: Manage Site-to-Site VPNs or Client VPNs connecting on-prem users to AWS resources.

Automation & Scalability

• Scripting: Build automations (Python, Bash, or Terraform) to eliminate manual IT tickets and repetitive tasks.
• Monitoring: Set up proactive alerting for network health and security threats using UniFi logs and AWS CloudWatch.

Qualifications:

• Networking: 4+ years of experience with deep knowledge of VLANs, Firewall rules, and routing.
• Stack Expertise: Proven experience managing Ubiquiti (UniFi) hardware and AWS cloud services.
• Security First: Strong understanding of the OWASP Top 10 and cloud security best practices.
• Startup DNA: Comfortable working in a fast-paced biotech environment where requirements evolve quickly.

Ready to apply? Join us in building the infrastructure that powers the next generation of food safety breakthroughs.